$ rpki-client -vvf rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft File: oUygeMheRlNdkgQ4K4SXTxOwyTw.mft (raw, json) Hash identifier: F+K3tfrpV4WJWfTxm/A9ZKWkAJN2MyXVxvxx4aLTYe8= Subject key identifier: B9:F1:D1:A2:FD:0B:78:5F:73:A2:17:7F:A2:91:F5:AD:1D:FE:98:AD Authority key identifier: A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C Certificate issuer: /CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft Manifest number: 0419 Signing time: Fri 03 May 2024 02:12:08 +0000 Manifest this update: Fri 03 May 2024 02:12:08 +0000 Manifest next update: Fri 10 May 2024 02:12:08 +0000 Files and hashes: 1: oUygeMheRlNdkgQ4K4SXTxOwyTw.crl (hash: QmpZh/6c1jCaKDsiig/n5feKRSgt4fQ63cpOyvFHuq4=) 2: B90B58FCD97211ED8C2F1263C4F9AE02.roa (hash: vx8I2rAt4ngN3ULXvENDY57ElXBQm5UO3w1gKIgmYDM=) 3: B9D90E00606311EE8844F941C4F9AE02.roa (hash: lO67gx11y7LRP3TT7EpxGiQlsSTO09ZeqHZQUPRePIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 10 May 2024 02:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E83FE/serialNumber=A14CA078C85E46535D9204382B84974F13B0C93C Validity Not Before: May 3 02:12:08 2024 GMT Not After : May 10 02:12:08 2024 GMT Subject: CN=663447f8-e658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:08:6e:b3:11:7e:cf:04:b3:0d:74:51:1a:22: ce:56:d8:b5:73:88:78:69:bd:c4:c8:bb:84:3c:fb: 84:3e:ee:82:37:77:c4:b6:f9:67:48:3b:45:75:9b: d7:6c:e7:df:3b:ec:a6:90:f2:ed:65:e9:b8:f7:e6: ee:92:4e:40:d5:d3:fa:52:76:ad:e5:ae:a8:53:da: f9:25:de:76:8c:1e:30:19:67:11:36:92:82:e5:89: 18:91:bf:7f:ed:4a:c2:db:a8:32:eb:78:00:d5:e2: 63:4c:b7:8c:98:fb:0b:22:a8:3a:19:f2:bb:c0:ad: 07:16:e8:68:e3:61:fa:54:ac:80:2a:88:51:6d:d4: 54:17:35:89:2b:e5:29:ce:52:04:83:05:33:7e:7a: af:82:8d:ce:15:c3:fa:f9:93:47:33:95:48:80:1c: aa:85:83:ca:3c:c9:bb:65:04:eb:82:90:5b:75:04: 79:a2:57:99:7f:5d:71:49:c2:2c:cd:fc:be:9b:b7: a7:64:4f:f2:f5:6d:1d:11:b2:7a:19:a8:a7:17:0a: 1e:65:8a:07:2d:0a:75:cc:70:c6:c3:68:a2:d6:73: 6b:80:57:38:5e:25:4f:1c:a0:f2:9b:8b:1d:4b:d9: 50:df:61:03:73:2c:a5:8c:de:ad:5c:70:f8:fe:27: ae:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F1:D1:A2:FD:0B:78:5F:73:A2:17:7F:A2:91:F5:AD:1D:FE:98:AD X509v3 Authority Key Identifier: keyid:A1:4C:A0:78:C8:5E:46:53:5D:92:04:38:2B:84:97:4F:13:B0:C9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oUygeMheRlNdkgQ4K4SXTxOwyTw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E83FE/3295F9021DB311EC86E0863EC4F9AE02/oUygeMheRlNdkgQ4K4SXTxOwyTw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:fb:47:c7:49:a5:df:03:99:3f:e2:73:ed:f2:79:35:bd:88: 4b:02:b2:33:0b:09:ed:fe:67:f4:03:4f:2d:7e:41:fb:3e:d4: fb:02:af:c1:ea:5a:00:4f:01:ac:b7:bd:29:2a:00:cb:07:44: 0c:0b:23:ad:2a:94:4d:57:a8:30:a6:06:b2:d8:94:b8:52:c8: f6:23:87:88:b3:5d:49:ff:e2:9e:00:00:4a:7d:db:f0:49:85: 51:61:9e:bd:f6:2f:ef:44:a3:bf:67:09:d5:d7:ff:f2:ca:9d: 8a:5c:2c:aa:2b:87:d9:a8:aa:b1:d8:59:7a:6d:41:79:4e:e0: 30:b1:53:7c:ce:d8:4a:34:75:a2:76:ed:7a:0f:85:34:ea:52: f8:8b:c4:24:43:de:0e:ff:48:44:19:98:a5:c4:78:64:1b:75: 02:5e:ca:d1:8a:d5:2a:8b:de:70:90:48:4b:20:ad:e1:37:a9: d4:a0:9a:df:22:36:38:a2:8f:e4:f3:ad:22:5b:18:17:8d:41: 3b:86:78:cf:49:6c:73:1b:34:26:d4:e2:6d:23:0a:51:cf:68: cd:41:5d:a5:7c:4c:26:bc:24:c4:a1:43:b8:60:a1:11:1d:a2: b5:ff:6e:6f:9f:96:fd:16:89:0a:4d:dd:55:2a:2a:73:fa:59: 9e:68:05:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTgzRkUxMTAvBgNVBAUTKEExNENBMDc4Qzg1RTQ2NTM1RDkyMDQzODJCODQ5NzRG MTNCMEM5M0MwHhcNMjQwNTAzMDIxMjA4WhcNMjQwNTEwMDIxMjA4WjAYMRYwFAYD VQQDEw02NjM0NDdmOC1lNjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQhusxF+zwSzDXRRGiLOVti1c4h4ab3EyLuEPPuEPu6CN3fEtvlnSDtFdZvX bOffO+ymkPLtZem49+bukk5A1dP6Unat5a6oU9r5Jd52jB4wGWcRNpKC5YkYkb9/ 7UrC26gy63gA1eJjTLeMmPsLIqg6GfK7wK0HFuho42H6VKyAKohRbdRUFzWJK+Up zlIEgwUzfnqvgo3OFcP6+ZNHM5VIgByqhYPKPMm7ZQTrgpBbdQR5oleZf11xScIs zfy+m7enZE/y9W0dEbJ6GainFwoeZYoHLQp1zHDGw2ii1nNrgFc4XiVPHKDym4sd S9lQ32EDcyyljN6tXHD4/ieutwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnx0aL9 C3hfc6IXf6KR9a0d/pitMB8GA1UdIwQYMBaAFKFMoHjIXkZTXZIEOCuEl08TsMk8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODNGRS8zMjk1RjkwMjFE QjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJsTmRrZ1E0SzRTWFR4T3d5 VHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29VeWdlTWhlUmxOZGtnUTRLNFNYVHhPd3lUdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODNGRS8zMjk1RjkwMjFEQjMxMUVDODZFMDg2M0VDNEY5QUUwMi9vVXlnZU1oZVJs TmRrZ1E0SzRTWFR4T3d5VHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI+0fHSaXfA5k/4nPt8nk1vYhLArIzCwnt/mf0A08tfkH7PtT7Aq/B 6loATwGst70pKgDLB0QMCyOtKpRNV6gwpgay2JS4Usj2I4eIs11J/+KeAABKfdvw SYVRYZ699i/vRKO/ZwnV1//yyp2KXCyqK4fZqKqx2Fl6bUF5TuAwsVN8zthKNHWi du16D4U06lL4i8QkQ94O/0hEGZilxHhkG3UCXsrRitUqi95wkEhLIK3hN6nUoJrf IjY4oo/k860iWxgXjUE7hnjPSWxzGzQm1OJtIwpRz2jNQV2lfEwmvCTEoUO4YKER HaK1/25vn5b9FokKTd1VKipz+lmeaAVF -----END CERTIFICATE-----Generated at Fri May 3 04:45:29 2024 by rpki-client on console-fra.rpki-client.org